Skip to content

Use a single codepath for extracting a .tar.zst wheel#19144

Merged
zsol merged 1 commit intomainfrom
zsol/jj-qwtyxklmstvp
Apr 24, 2026
Merged

Use a single codepath for extracting a .tar.zst wheel#19144
zsol merged 1 commit intomainfrom
zsol/jj-qwtyxklmstvp

Conversation

@zsol
Copy link
Copy Markdown
Member

@zsol zsol commented Apr 24, 2026

This extraction code is duplicated in two places, and the one this PR deletes has a few missing validations. Instead of fixing, this PR consolidates the codepaths.
This means uv won't depend on zstd or tar directly after merging this.

Comment thread crates/uv-distribution/src/distribution_database.rs
@zsol zsol force-pushed the zsol/jj-qwtyxklmstvp branch from ae48a08 to 38c7df1 Compare April 24, 2026 16:58
@zsol zsol marked this pull request as ready for review April 24, 2026 17:00
@zsol zsol merged commit 51448c2 into main Apr 24, 2026
111 checks passed
@zsol zsol deleted the zsol/jj-qwtyxklmstvp branch April 24, 2026 17:16
@zsol zsol added the security label Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants